Your fleet’s hours, locations and costs say a lot about your business. We encrypt them, limit who sees them, log every change and keep them in U.S. data centers. They are yours; we never sell or share them with manufacturers, dealers or lenders.
How we protect fleet data
The practices behind every account, described plainly.
Encryption throughout
Data is encrypted in transit between gateways, phones and servers, and encrypted at rest in storage.
Role permissions
Owners, managers, mechanics and operators see only the jobs, machines and costs their role allows.
An audit log
Every change to a machine, service plan, work order or permission is logged with who and when.
Single sign-on
Command plans sign in through your company’s identity provider, so leavers lose access in one place.
Regular backups
Fleet data is backed up to separate storage on a regular schedule.
U.S. data centers
Fleet data is hosted in data centers located in the United States.
Scoped AI access
The MCP server acts with the same permissions as the user who connects it, never more.
Your data, in plain terms
Who owns what, and what happens to it when you leave.
| Topic | What happens |
|---|---|
| Ownership | You own every position, engine hour, fault code, inspection, work order and cost record. |
| Export | Any time, as CSV or through the API, on every plan, including after you cancel. |
| Deletion | After cancellation, we delete your data within 30 days of a written request. |
| Sharing | Never shared with equipment manufacturers, dealers or lenders. |
| Selling | Never sold, to anyone, in any form. |
| Hosting | Data centers in the United States, with encryption in transit and at rest. |
Report a security problem
Email hello@gytix.com with “Security” in the subject. Describe what you found, how to reproduce it and what it could expose. A person replies within one business day. Please give us time to fix the problem before you disclose it publicly, and do not access other customers’ data while testing.
Data and security questions
Who owns the fleet data in Gytix?
You do. Every position, engine hour, fault code, inspection, work order and cost record belongs to your company. You can export all of it as CSV or through the API at any time, including after you cancel, and we never sell it or share it with manufacturers, dealers or lenders.
Where is Gytix fleet data hosted?
Fleet data is hosted in data centers in the United States, encrypted in transit and at rest, and backed up to separate storage. When an A1 gateway is out of coverage, it holds up to 30 days of readings on the device and sends them over an encrypted connection when it reconnects.
How do we get our data deleted after cancelling?
Send a written request to hello@gytix.com after cancellation, and we delete your data within 30 days of that request. Export anything you want to keep first, as CSV or through the API. The trackers you bought stay yours either way.
Can we control what each person sees?
Yes. Role permissions decide which jobs, machines, costs and settings each user can see or change, and the audit log records every change with the person and the time. On the Command plan, single sign-on lets you manage logins through your company’s identity provider.
Can you complete our security questionnaire?
Yes. Email it to hello@gytix.com with “Security” in the subject, and a person replies within one business day. Answers describe the practices on this page: encryption in transit and at rest, role permissions, an audit log, backups, U.S. hosting and single sign-on on Command.
Does the AI maintenance agent act on its own?
No. The AI maintenance agent drafts work orders and parts lists for a person to approve, and it never closes a work order or orders parts without human approval. The MCP server works with the same permissions as the user who connects it, so an assistant sees only what that user can see.
Ask us the hard questions
Bring your IT lead to the walkthrough and we will go through data, access and export.